hi

On Tue, 17 Oct 2006 09:34:26 -0400, "Brian Wallace" <[EMAIL PROTECTED]> wrote:
> Is there a way to create a user that has access to reboot efw either
> via the web interface or using ssh?  I would like to allow a specific
> user to reboot the efw computer in the case I am unable to connect

        Create a user in the endian and give it a password
        Create a openssh user certificate in a linux box
        Give the private certificate to the user
        copy the public certificate to the $HOME/.ssh/authorized_keys
        Edit this file and put command that he can execute in the end
(ie: command="/sbin/reboot" ssh-rsa AAA....)
        Edit the ssh config to require the certificate auth (recommended)
or disable the direct logons (change the logon shell to /bin/true)

        when the user ssh to the machine with the certificate, he must
still enter the password to confirm the user and then the ssh 
will execute only that command (ie: reboot)

        for multiple commands, i think you need multiple certificates or
some other hacks (a secure parsing script maybe)

        check this webpages for more info:

http://www.snailbook.com/faq/restricted-scp.auto.html
https://people.chem.umass.edu/wiki/index.php?title=RSYNC_and_SSH_With_Automated_Login

good luck
-- 
Naturally the common people don't want war... but after all it is the
leaders of a country who determine the policy, and it is always a 
simple matter to drag the people along, whether it is a democracy, or
a fascist dictatorship, or a parliament, or a communist dictatorship.
Voice or no voice, the people can always be brought to the bidding of
the leaders. That is easy. All you have to do is tell them they are 
being attacked, and denounce the pacifists for lack of patriotism and
exposing the country to danger.  It works the same in every country.
           -- Hermann Goering, Nazi and war criminal, 1883-1946

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Efw-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/efw-user

Reply via email to